Cisco CyberOps Associate

Monitor, detect, and respond to cybersecurity threats through hands-on labs aligned with the Cisco CyberOps Associate certification.

Cybersecurity Networking Cisco

About this course

Course Details

The CyberOps Associate labs prepare you for the Cisco Certified CyberOps Associate certification. You'll monitor network traffic, detect intrusions, analyze host-based and network-based threats, and apply security policies and procedures.

Topics covered include security concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies and procedures.

What you'll learn

01 Analyze network intrusion events using Cisco security monitoring tools
02 Perform host-based and network-based forensic analysis on security incidents
03 Implement security event correlation using SIEM platforms and log analysis
04 Configure endpoint security controls and evaluate their effectiveness
05 Navigate the Cisco CyberOps SOC workflow from detection through incident response
Course outline 11 modules · 37 labs
Module 3: The Windows Operating System 6 items
3.0.3 Lab - Identify Running Processes
3.2.11 Lab - Exploring Processes, Threads, Handles, and Windows Registry
3.3.10 Lab - Create User Accounts
3.3.11 Lab - Using Windows PowerShell
3.3.12 Lab - Windows Task Manager
3.3.13 Lab - Monitor and Manage System Resources in Windows
Module 4: Linux Overview 5 items
4.2.6 Lab - Working with Text Files in the CLI
4.2.7 Lab - Getting Familiar with the Linux Shell
4.3.4 Lab - Linux Servers
4.4.4 Lab - Locating Log Files
4.5.4 Lab - Navigating the Linux Filesystem and Permission Settings
Module 5: Network Protocols 2 items
5.1.5 Lab - Tracing a Route
5.3.7 Lab - Introduction to Wireshark
Module 8: Address Resolution Protocol 1 item
8.2.8 Lab - Using Wireshark to Examine Ethernet Frames
Module 9: The Transport Layer 2 items
9.2.6 Lab - Using Wireshark to Observe the TCP 3-Way Handshake
9.3.8 Lab - Exploring Nmap
Module 10: Network Services 3 items
10.2.7 Lab - Using Wireshark to Examine a UDP DNS Capture
10.4.3 Lab - Using Wireshark to Examine TCP and UDP Captures
10.6.7 Lab - Using Wireshark to Examine HTTP and HTTPS Traffic
Module 17: Attacking What We Do 3 items
17.1.7 Lab - Exploring DNS Traffic
17.2.6 Lab - Attacking a mySQL Database
17.2.7 Lab - Reading Server Logs
Module 21: Cryptography 6 items
21.0.3 Lab - Creating Codes
21.1.6 Lab - Hashing Things Out
21.2.10 Lab - Encrypting and Decrypting Data Using OpenSSL
21.2.11 Lab - Encrypting and Decrypting Data Using a Hacker Tool
21.2.12 Lab - Examining Telnet and SSH in Wireshark
21.4.7 Lab - Certificate Authority Stores
Module 26: Evaluating Alerts 1 item
26.1.7 Lab - Snort and Firewall Rules
Module 27: Working with Network Security Data 7 items
27.1.5 Lab - Convert Data into a Universal Format
27.2.9 Lab - Regular Expression Tutorial
27.2.10 Lab - Extract an Executable from a PCAP
27.2.12 Lab - Interpret HTTP and DNS Data to Isolate Threat Actor
27.2.14 Lab - Isolate Compromised Host Using 5-Tuple
27.2.15 Lab - Investigating a Malware Exploit
27.2.16 Lab - Investigating an Attack on a Windows Host
Cyber Range 1 item
No Lab: Launch Cyber Range

What's in this course

Lab Exercises

Prerequisites

  • Solid understanding of networking fundamentals (TCP/IP, routing, switching)
  • Basic cybersecurity knowledge (threats, vulnerabilities, security concepts)
  • Familiarity with Linux command-line operations recommended

Best for

  • Advanced learners pursuing a career in security operations
  • Professionals preparing for the Cisco CyberOps Associate (200-201 CBROPS) certification
  • SOC analysts and incident responders building hands-on detection skills
  • Learners with networking and cybersecurity fundamentals who want to specialize
Certification

This course aligns to the Cisco Certified CyberOps Associate (200-201 CBROPS) certification, covering security concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies and procedures.

Resources & support

NDG Online provides technical support specifically related to the functionality of the lab environment only. Any questions or concerns regarding the learning material or lab content must be directed to your instructor. Self-paced learners who find they require additional support are encouraged to seek out a course at a local academic institution.

Support Center
Instructor information

Demo Content

Common questions

Does this course prepare me for a certification?

The course aligns with the Cisco CyberOps Associate (200-201 CBROPS) exam objectives, covering security monitoring, host and network analysis, and SOC procedures.

How long do I have access?

Your purchase includes 6 months of access to the course content and labs.

What experience do I need before starting?

A solid grasp of networking fundamentals (TCP/IP, routing, switching) and basic cybersecurity concepts. Linux command-line familiarity helps in the analysis labs.